Issue 8848 - New LDAP URL syntax to support binding to specific IP address at client side
Summary: New LDAP URL syntax to support binding to specific IP address at client side
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-05-07 06:31 UTC by sudhir.singam@nokia.com
Modified: 2018-11-16 19:28 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description sudhir.singam@nokia.com 2018-05-07 06:31:53 UTC
Full_Name: Singam Sudhir Reddy
Version: master branch
OS: fedora
URL: ftp://ftp.openldap.org/incoming/sudhirsingam-180505.patch
Submission from: (NULL) (131.228.66.13)


The attached file is derived from OpenLDAP Software. All of the modifications to
OpenLDAP Software represented in the following patch(es) were developed by
NOKIA. NOKIA has not assigned rights and/or interest in this work to any party.
I, SINGAM SUDHIR REDDY authorized by NOKIA, my employer, to release this work
under the following terms.

NOKIA hereby place the following modifications to OpenLDAP Software (and only
these modifications) into the public domain. Hence, these modifications may be
freely used and/or redistributed for any purpose with or without attribution
and/or other notice.

****

Description:

Currently when using the openldap client and try to connect to LDAP server using
LDAP URL, client automatically binds to an IP address returned by kernel.

For example, in the below usage, client automatically binds to an IP address
returned by kernel.

ldapsearch -H ldap://10.63.57.239:389 D "uid=admin, ou=administrators,
ou=topologymanagement, o=netscaperoot" -x -w admin -b "uid=baha, ou=people,
ou=accounts, ou=region-911080, ou=regions, ou=netact, dc=noklab, dc=net,
dc=localdomain"

But if we want to route the traffic on a specific interface/IP address,
currently there is no provision. And the idea or enhancement is to introduce
such provision by giving source bind IP address in the URL in the following
format.

ldap://TARGET-IP-ADDRESS@SOURCE-BIND-IP-ADDRESS:PORT

For example,

ldapsearch -H ldap://10.63.57.239@10.37.220.9:389 D "uid=admin,
ou=administrators, ou=topologymanagement, o=netscaperoot" -x -w admin -b
"uid=baha, ou=people, ou=accounts, ou=region-911080, ou=regions, ou=netact,
dc=noklab, dc=net, dc=localdomain"

Note this feature is backward compatible, that is, it is optional to provide
source bind IP address in the URL.

This feature also supports IPV6 addresses.
Comment 1 sudhir.singam@nokia.com 2018-05-07 06:39:13 UTC
Sorry this is same as 8847, please close it. Somehow new ticket got created when I refresh browser page from last time.

Sorry for the trouble.

Regards,
Sudhir Singam

DELIVERING BEST-IN-CLASS PLATFORM is our vision

-----Original Message-----
From: openldap-its@OpenLDAP.org [mailto:openldap-its@OpenLDAP.org] 
Sent: Monday, May 07, 2018 12:02 PM
To: Singam, Sudhir (Nokia - IN/Bangalore) <sudhir.singam@nokia.com>
Subject: Re: (ITS#8848) New LDAP URL syntax to support binding to specific IP address at client side


*** THIS IS AN AUTOMATICALLY GENERATED REPLY ***

Thanks for your report to the OpenLDAP Issue Tracking System.  Your
report has been assigned the tracking number ITS#8848.

One of our support engineers will look at your report in due course.
Note that this may take some time because our support engineers
are volunteers.  They only work on OpenLDAP when they have spare
time.

If you need to provide additional information in regards to your
issue report, you may do so by replying to this message.  Note that
any mail sent to openldap-its@openldap.org with (ITS#8848)
in the subject will automatically be attached to the issue report.

	mailto:openldap-its@openldap.org?subject=(ITS#8848)

You may follow the progress of this report by loading the following
URL in a web browser:
    http://www.OpenLDAP.org/its/index.cgi?findid=8848

Please remember to retain your issue tracking number (ITS#8848)
on any further messages you send to us regarding this report.  If
you don't then you'll just waste our time and yours because we
won't be able to properly track the report.

Please note that the Issue Tracking System is not intended to
be used to seek help in the proper use of OpenLDAP Software.
Such requests will be closed.

OpenLDAP Software is user supported.
	http://www.OpenLDAP.org/support/

--------------
Copyright 1998-2007 The OpenLDAP Foundation, All Rights Reserved.


Comment 2 sudhir.singam@nokia.com 2018-08-21 07:51:19 UTC
Hi,

Any comments ??

Regards,
Sudhir Singam

DELIVERING BEST-IN-CLASS PLATFORM is our vision

-----Original Message-----
From: openldap-its@OpenLDAP.org <openldap-its@OpenLDAP.org> 
Sent: Monday, May 07, 2018 12:02 PM
To: Singam, Sudhir (Nokia - IN/Bangalore) <sudhir.singam@nokia.com>
Subject: Re: (ITS#8848) New LDAP URL syntax to support binding to specific IP address at client side


*** THIS IS AN AUTOMATICALLY GENERATED REPLY ***

Thanks for your report to the OpenLDAP Issue Tracking System.  Your
report has been assigned the tracking number ITS#8848.

One of our support engineers will look at your report in due course.
Note that this may take some time because our support engineers
are volunteers.  They only work on OpenLDAP when they have spare
time.

If you need to provide additional information in regards to your
issue report, you may do so by replying to this message.  Note that
any mail sent to openldap-its@openldap.org with (ITS#8848)
in the subject will automatically be attached to the issue report.

	mailto:openldap-its@openldap.org?subject=(ITS#8848)

You may follow the progress of this report by loading the following
URL in a web browser:
    http://www.OpenLDAP.org/its/index.cgi?findid=8848

Please remember to retain your issue tracking number (ITS#8848)
on any further messages you send to us regarding this report.  If
you don't then you'll just waste our time and yours because we
won't be able to properly track the report.

Please note that the Issue Tracking System is not intended to
be used to seek help in the proper use of OpenLDAP Software.
Such requests will be closed.

OpenLDAP Software is user supported.
	http://www.OpenLDAP.org/support/

--------------
Copyright 1998-2007 The OpenLDAP Foundation, All Rights Reserved.


Comment 3 OpenLDAP project 2018-11-16 19:28:31 UTC
Duplicate of ITS#8847
Comment 4 Quanah Gibson-Mount 2018-11-16 19:28:31 UTC
changed notes
changed state Open to Closed